Establishes Gaming Cybersecurity Intelligence and Response Council.
Impact
The establishment of the Gaming Cybersecurity Intelligence and Response Council is expected to significantly impact state regulations surrounding gaming and cybersecurity. It mandates the council to develop and conduct confidential briefings and training sessions for casino and sports wagering licensees. This measure aims to ensure that these entities are well-informed about ongoing threats and incident responses, thus enhancing their overall resilience against cyber threats. The council will also be tasked with producing annual reports detailing cybersecurity trends, council activities, and regulatory recommendations, which will serve both the government and industry stakeholders in decision-making.
Summary
Bill A1549, known as the 'Gaming Cybersecurity Intelligence and Response Council Act', proposes the establishment of a new council within the Division of Gaming Enforcement in New Jersey. The primary aim of this council is to enhance cybersecurity practices within the state's gaming industry by fostering strategic coordination among regulators, operators, and cybersecurity experts. The bill outlines the council's structure, consisting of seven members, including representatives from gaming enforcement, homeland security, and appointed members from gaming and educational sectors. These responsibilities emphasize the importance of a collaborative approach to mitigate cybersecurity threats faced by the gaming sector.
Contention
While the bill seeks to improve the overall cybersecurity framework within New Jersey's gaming industry, there might be contention concerning the balance between transparency and the sensitive nature of cybersecurity information. The law emphasizes that the security protocols and materials developed will not be disclosed to the public, which some may argue could hinder accountability or public awareness about the state of cybersecurity in gaming. Moreover, the reliance on authorized personnel to access sensitive information raises questions about who qualifies and how those determinations are made, potentially leaving out critical stakeholders in the gaming industry.
Requires businesses in financial essential infrastructure, and health care industries to develop cybersecurity plans and report cybersecurity incidents.